Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
File:                     37043548-8c04-3089-a47a-b02b8d4ea124.roa (raw, json)
Hash identifier:          3I1sfiFQHXPx9C9fVRH14EivJF199xuMYpaVIj2z0lg=
Subject key identifier:   00:E2:98:7A:4F:68:5A:4B:04:F3:2B:58:0E:4C:56:35:32:34:B0:5B
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E147EDAA980FE2F43640A5BC0
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa
Signing time:             Sat 06 Jun 2026 09:00:12 +0000
ROA not before:           Sat 06 Jun 2026 09:00:12 +0000
ROA not after:            Fri 04 Sep 2026 09:00:12 +0000
asID:                     55286
IP address blocks:        2604:c980:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:14:7e:da:a9:80:fe:2f:43:64:0a:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jun  6 09:00:12 2026 GMT
            Not After : Sep  4 09:00:12 2026 GMT
        Subject: CN=b7922726-611a-4426-bab6-bf217072d20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f8:cb:19:9a:b4:3c:8b:98:77:c3:0a:85:82:
                    ff:c9:75:33:a1:17:49:01:4c:41:12:36:5f:14:10:
                    a1:5e:0f:14:36:3c:81:62:c3:e6:b4:56:75:0a:fe:
                    17:1f:e8:1e:82:57:37:5b:f9:81:6e:b2:1e:c7:8d:
                    63:91:21:c2:51:6b:a9:34:d1:f8:cb:a5:c3:af:fb:
                    74:25:51:97:13:11:8b:17:c3:8b:c8:0c:9d:ea:af:
                    37:66:b0:b3:77:b4:5e:63:de:34:d8:2e:00:6c:93:
                    40:b0:31:d6:31:c8:c9:9f:10:ed:14:38:45:a5:84:
                    72:9c:fb:54:9e:74:bf:af:ac:89:be:59:b1:92:cf:
                    40:a7:b8:a2:17:cd:7a:fc:90:5d:e4:fe:c9:aa:45:
                    fc:31:00:f3:6c:59:44:f6:45:ad:08:da:0a:f7:e8:
                    48:f4:c3:64:cf:53:a7:3a:30:16:4b:e9:26:2d:f8:
                    d2:14:38:93:72:d5:20:e5:38:e0:a1:9e:64:7a:39:
                    84:0d:f4:9b:4d:69:ec:59:22:01:4f:ed:8e:41:ac:
                    f3:e4:f8:e0:4a:e1:c7:b2:0e:ae:3f:a2:97:8b:69:
                    14:2f:dd:26:25:96:34:3a:ef:80:f3:da:ed:8b:be:
                    dc:ea:14:fb:66:6d:e1:ef:6d:47:bd:c2:00:49:e2:
                    c1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:98:7A:4F:68:5A:4B:04:F3:2B:58:0E:4C:56:35:32:34:B0:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/37043548-8c04-3089-a47a-b02b8d4ea124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:4200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:d7:4e:67:8c:5a:a9:87:d1:29:02:ed:d7:dd:6a:46:7d:
         6b:18:a9:eb:a3:da:59:38:43:ec:28:1d:df:de:7b:c1:e9:db:
         e0:c2:a0:90:f2:3e:30:96:96:29:2f:6b:be:d2:8c:8a:22:a1:
         4b:25:90:67:1a:a3:a4:7c:d7:41:32:22:41:7f:46:5a:2d:bc:
         90:0e:be:97:df:ee:24:8c:cc:7f:9c:fa:1f:9e:55:f2:6b:09:
         1e:26:7e:cc:30:96:48:4f:5a:87:0b:0c:78:77:c1:d5:30:d6:
         69:72:8b:cf:5f:9c:8d:5f:f4:22:40:a8:60:3a:f5:12:7c:77:
         4d:12:b1:90:37:53:ba:69:7f:01:84:8b:5e:fe:01:af:97:ed:
         d6:49:77:83:db:9a:e8:23:20:c5:c3:61:86:22:58:f2:ab:04:
         3c:3c:76:3c:59:15:46:a5:bf:82:12:d7:e7:e6:55:2b:3d:28:
         a4:ad:b6:48:27:86:32:4c:78:34:68:64:b9:77:ae:5a:2a:ba:
         e6:aa:ad:8e:21:b3:08:3f:28:37:3a:c3:3e:c9:7a:86:d3:6f:
         67:06:95:82:e9:0b:94:b3:43:08:ef:f8:7a:1a:31:eb:42:14:
         25:bc:d8:28:cb:9a:b0:64:c6:e8:5b:73:e1:91:b6:17:3c:72:
         bc:2e:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:39:49 2026 by rpki-client